A list of useful articles for those studying for the OSCP
[Note: This is a work in-progress...]
GENERAL OSCP ADVICE:
THIS GUIDE MADE MY JAW DROP TO THE FLOOR - SO MANY OSCP GOODIES (via RustyShackleford221)
https://github.com/RustyShackleford221/OSCP-Prep
TREASURE TROVE OF GREAT INFO (both OSCP and general pentesting from trumstray):
https://github.com/trimstray/the-book-of-secret-knowledge/blob/master/README.md
VERRRY VERY USEFUL TIPS HERE FROM m0nk3h:
https://h4ck.co/oscp-journey-exam-lab-prep-tips/
WILL CHATHAM HAS A TON OF GOOD ADVICE:
https://www.willchatham.com/category/security/oscp/
NICE AND TO-THE-POINT (NO BS) LIST OF TIPS (via ibr2):
https://github.com/ibr2/pwk-cheatsheet/blob/master/Go-For-OSCP.md
PENETRATION TESTING TOOLS CHEAT SHEET (by Arr0way):
https://highon.coffee/blog/penetration-testing-tools-cheat-sheet/
GOOD ADVICE FROM ALIENVAULT BLOG (by Blade Soriano)
https://www.alienvault.com/blogs/security-essentials/how-to-prepare-to-take-the-oscp
GREAT ADVICE (and straight to the point - I love that!) FROM UNFO:
https://gist.github.com/unfo/5ddc85671dcf39f877aaf5dce105fac3
THIS ARTICLE IS FULL OF GEMS - WONDERFUL OSCP ADVICE (via Alex Dib):
https://scund00r.com/all/oscp/2018/02/25/passing-oscp.html
SECLIST - PENTESTERS COMPANION (This project is maintained by Daniel Miessler and Jason Haddix):
https://github.com/danielmiessler/SecLists
ENUMERATING:
THESE LISTS FOR LINUX and WINDOWS ENUMERATION ARE GREAT! (via xapax):
[ LINUX ]
https://github.com/xapax/oscp/blob/master/templates/linux-template.md
[ WINDOWS ]
https://github.com/xapax/oscp/blob/master/templates/windows-template.md
SMB ENUMERATION CHECKLIST (via 0xdf)
https://0xdf.gitlab.io/2018/12/02/pwk-notes-smb-enumeration-checklist-update1.html
EXPLOITS - DOING IT MANUALLY (WITHOUT METASPLOIT):
SOOOOOOO many resources for hacking here!!:
https://github.com/vitalysim/Awesome-Hacking-Resources
A Guide to Hacking Without Metasploit – Luke Stephens (@hakluke) – Medium
https://medium.com/@hakluke/haklukes-guide-to-hacking-without-metasploit-1bbbe3d14f90
(REDDIT discussion about above article)
https://www.reddit.com/r/oscp/comments/93w5o2/haklukes_guide_to_hacking_without_metasploit/
REDDIT discussion "exploitation without metasploit"
https://www.reddit.com/r/oscp/comments/948jel/exploitation_without_metasploit/
PAYLOAD ALL THE THINGS!! (via swisskyrepo):
https://github.com/swisskyrepo/PayloadsAllTheThings
REPORTING TIPS:
EXTENSIVE LIST OF PUBLICLY AVAILABLE PENTEST REPORT EXAMPLES (via juliocesarfort):
https://github.com/juliocesarfort/public-pentesting-reports
WHAT TO INCLUDE IN A PENETRATION TESTING REPORT (via Mitra94):
https://www.cybrary.it/0p3n/penetration-testing-report/
...coming soon
SQL INJECTION TIPS - DOING IT MANUALLY (WITHOUT SQLMAP):